Apache Kylin Session Fixation vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-23590 · ADVISORY
• apache/kylin · PACKAGE
• lists.apache.org/thread/7161154h0k6zygr9917qq0g95p39szml · WEB
• openwall.com/lists/oss-security/2024/11/03/1 · WEB

org.apache.kylin:kylin のその他の脆弱性

• CVE-2025-61735高 7.3Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine a…
• CVE-2025-61734高 7.5Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project a…
• CVE-2025-61733高 7.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through…
• CVE-2025-30067高 7.2Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. If an attacker gets access to Kylin's system or pr…
• CVE-2022-43396高 8.8In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can contro…